[Navigator]

ntdll.dll is part of the Native API, not Windows API.

[njq8]

work on vista 32bit ^^

thanks very nice code

[Neroxan]

tehee... You .net kids really should look @ some of the vb6 runpe's every now and then. Nice cluebat for those who werent aware of it though.

[affixiate]

tehee... You .net kids really should look @ some of the vb6 runpe's every now and then. Nice cluebat for those who werent aware of it though.

It really depends how you design it. I use the native functions for my C# RunPE.

It's quicker to call the ntdll import since most of the Windows APIs call something in ntdll to do the work. However, it also is uncertain. Microsoft explicitly tells you not to use many of the undocumented functions because they are well, undocumented, and can be altered at anytime.

Anyway, pr0t0typ3, solid work. If I could give rep here, I would give you some green apples.